This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json) Hash identifier: EXPtV44yReU7vOZ8a0LdLO57VdmLRahI23vIRXBNPUE= Subject key identifier: FD:FB:E4:F1:8A:FA:EA:82:B6:11:26:96:14:C7:9C:D7:A1:E9:92:B9 Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33 Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233 Certificate serial: 019AF50AAD1B3AC622CD789CF31A3829E921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 19:01:48 +0000 Manifest this update: Sat 06 Dec 2025 19:01:48 +0000 Manifest next update: Sun 07 Dec 2025 19:01:48 +0000 Files and hashes: 1: TsaeWiaMsP1j_z_xMCDhi5soRx0.roa (hash: cFv4JeYxc6KlGhF0oX6eBMNahY8RJkA5Wg3CLEjEyhU=) 2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: wkBMmbKgOmadEPHHuvgWj4m3P9ezHrx6jPKg7jMJQi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:ad:1b:3a:c6:22:cd:78:9c:f3:1a:38:29:e9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233 Validity Not Before: Dec 6 19:01:48 2025 GMT Not After : Dec 7 19:01:48 2025 GMT Subject: CN=fdfbe4f18afaea82b611269614c79cd7a1e992b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cf:73:b4:82:bd:ce:ec:3d:d1:f1:de:4f:20: 30:bd:6d:f2:66:fe:62:1c:84:0d:72:6f:92:00:34: 5f:18:ab:94:75:8b:1e:72:b7:ae:75:87:4a:a9:02: 5a:96:d0:9d:94:f1:85:46:44:83:49:80:06:6a:e5: c7:5d:b9:0e:88:f0:9f:6f:fb:4d:c9:0a:b4:1a:80: 71:35:47:11:3f:6f:7c:3f:ad:c7:a2:d5:1d:fd:d5: 74:fc:a6:f8:cc:6b:c1:52:bf:16:c5:4c:eb:f0:3c: a7:e1:80:de:e0:b4:03:d6:65:6e:da:16:80:35:40: f1:1c:f9:a9:35:2d:79:b0:10:8d:81:ea:a8:ad:d3: 9d:a3:3c:86:4a:96:2d:a7:bd:82:00:25:47:af:7e: 2c:83:c7:d9:fb:69:de:07:6d:23:7c:31:eb:b2:fa: 38:4b:1e:66:f8:8e:d5:02:19:c6:db:49:cb:e5:eb: a2:56:4f:e3:44:b1:ce:b3:9d:89:13:c9:ad:c4:b2: 5f:a3:41:cb:ef:4d:97:25:55:b5:ac:e0:42:2d:7e: f0:a5:80:9d:c3:72:b9:e3:74:33:a9:23:d7:cc:31: 81:71:c1:30:08:7e:21:9b:00:b2:dc:d3:36:02:f0: 64:89:de:97:33:e8:c8:f3:96:08:09:11:a4:2f:1b: db:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FB:E4:F1:8A:FA:EA:82:B6:11:26:96:14:C7:9C:D7:A1:E9:92:B9 X509v3 Authority Key Identifier: keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1c:2d:93:01:21:de:7a:87:01:3f:c3:0e:a1:e5:0c:e3:f7: 5f:5e:0d:6a:81:a8:26:e0:86:47:fd:e9:f0:a2:9e:3e:cf:a3: 13:d9:eb:b9:77:b9:d4:a2:08:b5:cb:63:f2:91:50:d0:3e:b4: 58:2e:a5:4d:49:96:60:76:f0:83:81:a7:17:f3:22:da:49:b7: ba:89:51:51:0e:39:6a:16:50:30:c8:4b:79:f0:b2:60:75:24: 31:40:1c:b7:17:6f:b0:38:a6:8b:c5:46:b2:ba:f6:4c:34:ce: 77:85:f4:e0:b0:b4:17:6c:5e:00:64:38:c1:8b:10:4f:4d:5d: 64:15:ab:a4:41:cb:62:26:0d:05:44:c5:e3:36:b1:86:6a:24: 6d:1b:5e:90:4e:ef:c8:37:42:33:87:9a:db:f7:6c:d6:3c:ab: d6:c4:71:20:c1:60:2d:4a:95:d3:69:63:57:ee:3a:6b:5e:13: 64:93:53:43:0e:4a:00:66:55:09:c0:a8:b8:71:6e:b8:ea:1a: cb:3d:63:d1:55:5e:0d:7c:7b:69:6a:8b:6d:bc:58:56:97:30: a1:21:12:a1:98:c8:d6:13:b1:e6:21:51:e5:01:84:3c:34:7f: 0d:d6:80:3f:6a:e4:13:66:7b:74:5b:b5:03:d8:f9:83:c7:91: a2:a7:d0:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cq0bOsYizXic8xo4KekhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjU2NGZjMjA2YzRiYzVkYjU4ZjdlZmJiYjFlOGY4ODQ5 OWUyMzMwHhcNMjUxMjA2MTkwMTQ4WhcNMjUxMjA3MTkwMTQ4WjAzMTEwLwYDVQQD EyhmZGZiZTRmMThhZmFlYTgyYjYxMTI2OTYxNGM3OWNkN2ExZTk5MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c9ztIK9zuw90fHeTyAwvW3yZv5i HIQNcm+SADRfGKuUdYsecreudYdKqQJaltCdlPGFRkSDSYAGauXHXbkOiPCfb/tN yQq0GoBxNUcRP298P63HotUd/dV0/Kb4zGvBUr8WxUzr8Dyn4YDe4LQD1mVu2haA NUDxHPmpNS15sBCNgeqordOdozyGSpYtp72CACVHr34sg8fZ+2neB20jfDHrsvo4 Sx5m+I7VAhnG20nL5euiVk/jRLHOs52JE8mtxLJfo0HL702XJVW1rOBCLX7wpYCd w3K543QzqSPXzDGBccEwCH4hmwCy3NM2AvBkid6XM+jI85YICRGkLxvbFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP375PGK+uqCthEmlhTHnNeh6ZK5MB8GA1UdIwQY MBaAFHdlZPwgbEvF21j377ux6PiEmeIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjIt ZGQ5MDdiNzc0ZjIyLzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjItZGQ5MDdiNzc0ZjIy LzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxwtkwEh 3nqHAT/DDqHlDOP3X14NaoGoJuCGR/3p8KKePs+jE9nruXe51KIItctj8pFQ0D60 WC6lTUmWYHbwg4GnF/Mi2km3uolRUQ45ahZQMMhLefCyYHUkMUActxdvsDimi8VG srr2TDTOd4X04LC0F2xeAGQ4wYsQT01dZBWrpEHLYiYNBUTF4zaxhmokbRtekE7v yDdCM4ea2/ds1jyr1sRxIMFgLUqV02ljV+46a14TZJNTQw5KAGZVCcCouHFuuOoa yz1j0VVeDXx7aWqLbbxYVpcwoSESoZjI1hOx5iFR5QGEPDR/DdaAP2rkE2Z7dFu1 A9j5g8eRoqfQFw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:27:33 2025 by rpki-client